From 859647060900e3524a424a37b145b2506f7d2f4d Mon Sep 17 00:00:00 2001
From: Mohammed Naser <mnaser@vexxhost.com>
Date: Thu, 2 Dec 2021 12:43:32 +0400
Subject: [PATCH] Added cluster/temp_cache_dir

When using Barbican with a large number of clusters, this option can
allow Magnum to cache the certificates locally to avoid hitting
the API excessively. It is enabled out of the box however since
we don't have that folder, it is not working.

Change-Id: I63cb35798b82460f7addd4ec719c157e2c1c4fd9
---
 magnum/Chart.yaml                           | 2 +-
 magnum/templates/statefulset-conductor.yaml | 4 ++++
 magnum/values.yaml                          | 2 ++
 releasenotes/notes/magnum.yaml              | 1 +
 4 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/magnum/Chart.yaml b/magnum/Chart.yaml
index 3e81f98dcb..75aef1aee5 100644
--- a/magnum/Chart.yaml
+++ b/magnum/Chart.yaml
@@ -14,7 +14,7 @@ apiVersion: v1
 appVersion: v1.0.0
 description: OpenStack-Helm Magnum
 name: magnum
-version: 0.2.3
+version: 0.2.4
 home: https://docs.openstack.org/magnum/latest/
 icon: https://www.openstack.org/themes/openstack/images/project-mascots/Magnum/OpenStack_Project_Magnum_vertical.png
 sources:
diff --git a/magnum/templates/statefulset-conductor.yaml b/magnum/templates/statefulset-conductor.yaml
index 49621a07a5..44d8b0273b 100644
--- a/magnum/templates/statefulset-conductor.yaml
+++ b/magnum/templates/statefulset-conductor.yaml
@@ -108,6 +108,8 @@ spec:
               mountPath: /tmp/pod-shared
             - name: magnum-lock-path
               mountPath: {{ .Values.conf.magnum.oslo_concurrency.lock_path }}
+            - name: magnum-certificate-cache
+              mountPath: {{ .Values.conf.magnum.cluster.temp_cache_dir }}
 {{ if $mounts_magnum_conductor.volumeMounts }}{{ toYaml $mounts_magnum_conductor.volumeMounts | indent 12 }}{{ end }}
       volumes:
         - name: pod-tmp
@@ -126,5 +128,7 @@ spec:
             defaultMode: 0444
         - name: magnum-lock-path
           emptyDir: {}
+        - name: magnum-certificate-cache
+          emptyDir: {}
 {{ if $mounts_magnum_conductor.volumes }}{{ toYaml $mounts_magnum_conductor.volumes | indent 8 }}{{ end }}
 {{- end }}
diff --git a/magnum/values.yaml b/magnum/values.yaml
index 66fe791c70..544472a80e 100644
--- a/magnum/values.yaml
+++ b/magnum/values.yaml
@@ -115,6 +115,8 @@ conf:
     DEFAULT:
       log_config_append: /etc/magnum/logging.conf
       transport_url: null
+    cluster:
+      temp_cache_dir: /var/lib/magnum/certificate-cache
     oslo_messaging_notifications:
       driver: messaging
     oslo_concurrency:
diff --git a/releasenotes/notes/magnum.yaml b/releasenotes/notes/magnum.yaml
index 1e74af9b11..88a4226f7d 100644
--- a/releasenotes/notes/magnum.yaml
+++ b/releasenotes/notes/magnum.yaml
@@ -7,4 +7,5 @@ magnum:
   - 0.2.1 Use policies in yaml format
   - 0.2.2 Fix restarting of magnum-conductor pods
   - 0.2.3 Update htk requirements repo
+  - 0.2.4 Mount empty temp_cache_dir for performance
 ...